{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat build of Quarkus.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For more information, see the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release of Red Hat build of Quarkus 3.27.3.SP1 includes the following CVE fixes:\n\n* quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via  semicolons in HTTP requests [quarkus-3.27] (CVE-2026-39852)\n* bcprov-jdk18on: LDAP injection vulnerability in LDAPStoreHelper.java [quarkus-3.27] (CVE-2026-0636)\n* bcpkix-jdk18on: PKIX draft CompositeVerifier accepts empty signature sequence as valid [quarkus-3.27] (CVE-2026-5588)\n* bcprov-jdk18on: GOSTCTR implementation unable to process more than 255 blocks correctly [quarkus-3.27] (CVE-2025-14813)\n* kafka-clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management [quarkus-3.27] (CVE-2026-35554)\n\nFor more information, see the release notes page listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:11721",
        "url": "https://access.redhat.com/errata/RHSA-2026:11721"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/products/quarkus/",
        "url": "https://access.redhat.com/products/quarkus/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus\u0026downloadType=distributions\u0026version=3.27.3.SP1",
        "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus\u0026downloadType=distributions\u0026version=3.27.3.SP1"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_build_of_quarkus/3.27",
        "url": "https://docs.redhat.com/en/documentation/red_hat_build_of_quarkus/3.27"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11721.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat build of Quarkus 3.27.3.SP1 security update",
    "tracking": {
      "current_release_date": "2026-08-17T13:44:16+00:00",
      "generator": {
        "date": "2026-08-17T13:44:16+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:11721",
      "initial_release_date": "2026-05-05T03:47:16+00:00",
      "revision_history": [
        {
          "date": "2026-05-05T03:47:16+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-05-05T03:47:16+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-17T13:44:16+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Quarkus 3.27.3.SP1",
                "product": {
                  "name": "Red Hat build of Quarkus 3.27.3.SP1",
                  "product_id": "Red Hat build of Quarkus 3.27.3.SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quarkus:3.27::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Quarkus"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-14813",
      "cwe": {
        "id": "CWE-327",
        "name": "Use of a Broken or Risky Cryptographic Algorithm"
      },
      "discovery_date": "2026-04-15T10:01:27.769752+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458640"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The `GOSTCTR` implementation is unable to securely process more than 255 blocks of data due to keystream reuse. This issue allows an attacker to break the fundamental confidentiality of any data protected by the `G3413CTRBlockCipher`, potentially leading to the recovery and access of encrypted data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to capture ciphertext encrypted by the `GOSTCTR` implementation where the `G3413CTRBlockCipher` processed more than 255 blocks of data, resulting in keystream reuse. An attack typically requires capturing these overlapping ciphertexts to perform cryptanalysis and uncover the underlying data.\nThe primary impact of this vulnerability is the potential loss of confidentiality for data encrypted by the `GOSTCTR` implementation. This can compromise encrypted communications or sensitive stored data by allowing an attacker to fully recover the plaintext.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat build of Quarkus 3.27.3.SP1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-14813"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458640",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458640"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-14813",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-14813"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14813",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14813"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813",
          "url": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813"
        }
      ],
      "release_date": "2026-04-15T08:56:34.057000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-05T03:47:16+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat build of Quarkus 3.27.3.SP1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11721"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, strictly limit the payload encrypted under a single key and Initialization Vector (IV) pair using the GOSTCTR implementation and G3413CTRBlockCipher to a maximum of 255 blocks. Alternatively, transition to a more secure, standardized and authenticated encryption mode.",
          "product_ids": [
            "Red Hat build of Quarkus 3.27.3.SP1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat build of Quarkus 3.27.3.SP1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly"
    },
    {
      "cve": "CVE-2026-0636",
      "cwe": {
        "id": "CWE-90",
        "name": "Improper Neutralization of Special Elements used in an LDAP Query (\u0027LDAP Injection\u0027)"
      },
      "discovery_date": "2026-04-15T10:01:32.911938+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458641"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The `LDAPStoreHelper` implementation fails to properly neutralize special elements in user-supplied input before incorporating them into LDAP queries. This allows a remote attacker to execute an LDAP injection attack by supplying crafted input, potentially leading to disclosure of sensitive information or the manipulation of directory search queries.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to submit crafted input to an application using the `LDAPStoreHelper` implementation for directory queries. An attack typically requires the application to pass the malicious input directly into a search filter, allowing the attacker to modify the resulting LDAP query.\nThe primary impact of this vulnerability is the loss of confidentiality and integrity for directory data. This can allow an attacker to bypass search restrictions and manipulate directory results, potentially leading to unauthorized access or privilege escalation.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat build of Quarkus 3.27.3.SP1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0636"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458641",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458641"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-0636",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-0636"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0636",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0636"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde",
          "url": "https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636",
          "url": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636"
        }
      ],
      "release_date": "2026-04-15T08:59:12.677000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-05T03:47:16+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat build of Quarkus 3.27.3.SP1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11721"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, sanitize all user-supplied input to remove or escape LDAP special characters before passing it to the LDAPStoreHelper for directory queries. If the input contains unexpected metacharacters such as asterisks, parentheses or backslashes, reject the request or escape the characters.",
          "product_ids": [
            "Red Hat build of Quarkus 3.27.3.SP1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat build of Quarkus 3.27.3.SP1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java"
    },
    {
      "cve": "CVE-2026-5588",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-04-15T10:00:59.672015+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458634"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix. The PKIX draft `CompositeVerifier` implementation improperly accepts an empty signature sequence as a valid cryptographic signature. This issue allows a remote attacker to bypass signature verification mechanisms, potentially compromising the authenticity and integrity of data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to submit a crafted payload or token containing an empty signature sequence to an application using the `CompositeVerifier` for cryptographic validation. An attack typically requires the application to process this malformed data and improperly accept the empty sequence as a valid signature, bypassing standard verification checks.\nThe primary impact of this vulnerability is the compromise of data authenticity and integrity, allowing an attacker to forge digital signatures and impersonate trusted entities.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat build of Quarkus 3.27.3.SP1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-5588"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458634",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458634"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-5588",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-5588"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5588",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5588"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588",
          "url": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588"
        }
      ],
      "release_date": "2026-04-15T09:06:15.617000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-05T03:47:16+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat build of Quarkus 3.27.3.SP1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11721"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, check that the signature sequence is not empty before passing any data to the CompositeVerifier for cryptographic validation. If the sequence is empty or null, explicitly reject the payload before it is processed.",
          "product_ids": [
            "Red Hat build of Quarkus 3.27.3.SP1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat build of Quarkus 3.27.3.SP1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid"
    },
    {
      "cve": "CVE-2026-35554",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-04-07T14:01:09.792155+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455916"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Apache Kafka Java producer client. A race condition in the client\u0027s buffer pool management can cause messages to be silently delivered to incorrect topics. This occurs when a message batch expires while its network request is still active, leading to premature buffer deallocation and potential reuse by other messages. Consequently, sensitive data may be exposed to unauthorized consumers, and data integrity can be compromised through deserialization failures and processing errors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache Kafka Clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat build of Quarkus 3.27.3.SP1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35554"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455916",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455916"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35554",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35554"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35554",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35554"
        },
        {
          "category": "external",
          "summary": "https://issues.apache.org/jira/browse/KAFKA-19012",
          "url": "https://issues.apache.org/jira/browse/KAFKA-19012"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/f07x7j8ovyqhjd1to25jsnqbm6wj01d6",
          "url": "https://lists.apache.org/thread/f07x7j8ovyqhjd1to25jsnqbm6wj01d6"
        }
      ],
      "release_date": "2026-04-07T13:07:08.679000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-05T03:47:16+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat build of Quarkus 3.27.3.SP1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11721"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat build of Quarkus 3.27.3.SP1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat build of Quarkus 3.27.3.SP1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Apache Kafka Clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management"
    },
    {
      "cve": "CVE-2026-39852",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-04-13T13:26:46.572000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2457819"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in io.quarkus:quarkus-vertx-http. A remote attacker can exploit an authorization bypass vulnerability by including semicolons, also known as matrix parameters, in HTTP requests. This allows bypassing path-based HTTP security policies, enabling unauthorized access to protected endpoints. The vulnerability arises because Quarkus\u0027s security layer performs authorization checks on the raw URL path, which preserves these matrix parameters.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.quarkus:quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat build of Quarkus 3.27.3.SP1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2457819",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457819"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39852"
        },
        {
          "category": "external",
          "summary": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-rc95-pcm8-65v9",
          "url": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-rc95-pcm8-65v9"
        }
      ],
      "release_date": "2026-05-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-05T03:47:16+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat build of Quarkus 3.27.3.SP1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11721"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, configure a reverse proxy or load balancer in front of the Quarkus application to normalize incoming URL paths by stripping matrix parameters (semicolons) before requests reach the Quarkus security layer. This ensures that authorization checks are performed on the intended path. Ensure that any changes to proxy configurations are thoroughly tested and services are reloaded or restarted as necessary to apply the new settings.",
          "product_ids": [
            "Red Hat build of Quarkus 3.27.3.SP1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat build of Quarkus 3.27.3.SP1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.quarkus:quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available (RHBQ 3.27.3.SP1).\nThe purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products.\nRed Hat Product Security has rated this update as having a security impact of Important.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "An update for Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available (RHBQ 3.27.3.SP1).\n        The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products:\n        *  bcprov-jdk18on: LDAP injection vulnerability in LDAPStoreHelper.java [rhboac-camel-quarkus-3] (CVE-2026-0636)\n        *  bcpg-jdk18on: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion [rhboac-camel-quarkus-3] (CVE-2026-3505)\n        *  bcpkix-jdk18on: PKIX draft CompositeVerifier accepts empty signature sequence as valid [rhboac-camel-quarkus-3] (CVE-2026-5588)\n        *  bcprov-jdk18on: GOSTCTR implementation unable to process more than 255 blocks correctly [rhboac-camel-quarkus-3] (CVE-2025-14813)\n        *  kafka-clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management [rhboac-camel-quarkus-3] (CVE-2026-35554)\n        *  quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests [rhboac-camel-quarkus-3] (CVE-2026-39852)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:13631",
        "url": "https://access.redhat.com/errata/RHSA-2026:13631"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-0636",
        "url": "https://access.redhat.com/security/cve/CVE-2026-0636"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-3505",
        "url": "https://access.redhat.com/security/cve/CVE-2026-3505"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-5588",
        "url": "https://access.redhat.com/security/cve/CVE-2026-5588"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-14813",
        "url": "https://access.redhat.com/security/cve/CVE-2025-14813"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-35554",
        "url": "https://access.redhat.com/security/cve/CVE-2026-35554"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39852",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39852"
      },
      {
        "category": "external",
        "summary": "2455916",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455916"
      },
      {
        "category": "external",
        "summary": "2457819",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457819"
      },
      {
        "category": "external",
        "summary": "2458634",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458634"
      },
      {
        "category": "external",
        "summary": "2458638",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458638"
      },
      {
        "category": "external",
        "summary": "2458640",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458640"
      },
      {
        "category": "external",
        "summary": "2458641",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458641"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13631.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available (RHBQ 3.27.3.SP1)",
    "tracking": {
      "current_release_date": "2026-08-18T11:20:53+00:00",
      "generator": {
        "date": "2026-08-18T11:20:53+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:13631",
      "initial_release_date": "2026-05-05T07:56:59+00:00",
      "revision_history": [
        {
          "date": "2026-05-05T07:56:59+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-05-05T07:56:59+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-18T11:20:53+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27",
                "product": {
                  "name": "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27",
                  "product_id": "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:apache_camel_quarkus:3.27"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Build of Apache Camel"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-14813",
      "cwe": {
        "id": "CWE-327",
        "name": "Use of a Broken or Risky Cryptographic Algorithm"
      },
      "discovery_date": "2026-04-15T10:01:27.769752+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458640"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The `GOSTCTR` implementation is unable to securely process more than 255 blocks of data due to keystream reuse. This issue allows an attacker to break the fundamental confidentiality of any data protected by the `G3413CTRBlockCipher`, potentially leading to the recovery and access of encrypted data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to capture ciphertext encrypted by the `GOSTCTR` implementation where the `G3413CTRBlockCipher` processed more than 255 blocks of data, resulting in keystream reuse. An attack typically requires capturing these overlapping ciphertexts to perform cryptanalysis and uncover the underlying data.\nThe primary impact of this vulnerability is the potential loss of confidentiality for data encrypted by the `GOSTCTR` implementation. This can compromise encrypted communications or sensitive stored data by allowing an attacker to fully recover the plaintext.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-14813"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458640",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458640"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-14813",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-14813"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14813",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14813"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813",
          "url": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813"
        }
      ],
      "release_date": "2026-04-15T08:56:34.057000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-05T07:56:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:13631"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, strictly limit the payload encrypted under a single key and Initialization Vector (IV) pair using the GOSTCTR implementation and G3413CTRBlockCipher to a maximum of 255 blocks. Alternatively, transition to a more secure, standardized and authenticated encryption mode.",
          "product_ids": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly"
    },
    {
      "cve": "CVE-2026-0636",
      "cwe": {
        "id": "CWE-90",
        "name": "Improper Neutralization of Special Elements used in an LDAP Query (\u0027LDAP Injection\u0027)"
      },
      "discovery_date": "2026-04-15T10:01:32.911938+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458641"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The `LDAPStoreHelper` implementation fails to properly neutralize special elements in user-supplied input before incorporating them into LDAP queries. This allows a remote attacker to execute an LDAP injection attack by supplying crafted input, potentially leading to disclosure of sensitive information or the manipulation of directory search queries.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to submit crafted input to an application using the `LDAPStoreHelper` implementation for directory queries. An attack typically requires the application to pass the malicious input directly into a search filter, allowing the attacker to modify the resulting LDAP query.\nThe primary impact of this vulnerability is the loss of confidentiality and integrity for directory data. This can allow an attacker to bypass search restrictions and manipulate directory results, potentially leading to unauthorized access or privilege escalation.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0636"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458641",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458641"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-0636",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-0636"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0636",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0636"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde",
          "url": "https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636",
          "url": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636"
        }
      ],
      "release_date": "2026-04-15T08:59:12.677000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-05T07:56:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:13631"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, sanitize all user-supplied input to remove or escape LDAP special characters before passing it to the LDAPStoreHelper for directory queries. If the input contains unexpected metacharacters such as asterisks, parentheses or backslashes, reject the request or escape the characters.",
          "product_ids": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java"
    },
    {
      "cve": "CVE-2026-3505",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-15T10:01:17.415497+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458638"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpg. A specially crafted PGP AEAD (Authenticated Encryption with Associated Data) message with an unbounded chunk size can lead to an excessive consumption of memory. This issue allows an unauthenticated remote attacker to cause memory exhaustion in a JVM, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to submit a specially crafted PGP AEAD message containing an unbounded chunk size to an application. An attack typically requires the application to process this malformed data, resulting in the uncontrolled allocation of memory resources.\nThe primary impact of this vulnerability is a compromise of system availability, allowing an unauthenticated remote attacker to cause memory exhaustion in a JVM, resulting in a denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-3505"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458638",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458638"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-3505",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-3505"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3505",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3505"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505",
          "url": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505"
        }
      ],
      "release_date": "2026-04-15T09:06:37.939000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-05T07:56:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:13631"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, enforce payload size limits on all incoming PGP messages before processing them. Additionally, apply memory quotas to the JVM or container environment to prevent a complete system outage in the event of memory exhaustion.",
          "product_ids": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion"
    },
    {
      "cve": "CVE-2026-5588",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-04-15T10:00:59.672015+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458634"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix. The PKIX draft `CompositeVerifier` implementation improperly accepts an empty signature sequence as a valid cryptographic signature. This issue allows a remote attacker to bypass signature verification mechanisms, potentially compromising the authenticity and integrity of data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to submit a crafted payload or token containing an empty signature sequence to an application using the `CompositeVerifier` for cryptographic validation. An attack typically requires the application to process this malformed data and improperly accept the empty sequence as a valid signature, bypassing standard verification checks.\nThe primary impact of this vulnerability is the compromise of data authenticity and integrity, allowing an attacker to forge digital signatures and impersonate trusted entities.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-5588"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458634",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458634"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-5588",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-5588"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5588",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5588"
        },
        {
          "category": "external",
          "summary": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588",
          "url": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588"
        }
      ],
      "release_date": "2026-04-15T09:06:15.617000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-05T07:56:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:13631"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, check that the signature sequence is not empty before passing any data to the CompositeVerifier for cryptographic validation. If the sequence is empty or null, explicitly reject the payload before it is processed.",
          "product_ids": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid"
    },
    {
      "cve": "CVE-2026-35554",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-04-07T14:01:09.792155+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455916"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Apache Kafka Java producer client. A race condition in the client\u0027s buffer pool management can cause messages to be silently delivered to incorrect topics. This occurs when a message batch expires while its network request is still active, leading to premature buffer deallocation and potential reuse by other messages. Consequently, sensitive data may be exposed to unauthorized consumers, and data integrity can be compromised through deserialization failures and processing errors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache Kafka Clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35554"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455916",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455916"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35554",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35554"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35554",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35554"
        },
        {
          "category": "external",
          "summary": "https://issues.apache.org/jira/browse/KAFKA-19012",
          "url": "https://issues.apache.org/jira/browse/KAFKA-19012"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/f07x7j8ovyqhjd1to25jsnqbm6wj01d6",
          "url": "https://lists.apache.org/thread/f07x7j8ovyqhjd1to25jsnqbm6wj01d6"
        }
      ],
      "release_date": "2026-04-07T13:07:08.679000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-05T07:56:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:13631"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Apache Kafka Clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management"
    },
    {
      "cve": "CVE-2026-39852",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-04-13T13:26:46.572000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2457819"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in io.quarkus:quarkus-vertx-http. A remote attacker can exploit an authorization bypass vulnerability by including semicolons, also known as matrix parameters, in HTTP requests. This allows bypassing path-based HTTP security policies, enabling unauthorized access to protected endpoints. The vulnerability arises because Quarkus\u0027s security layer performs authorization checks on the raw URL path, which preserves these matrix parameters.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.quarkus:quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2457819",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457819"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39852"
        },
        {
          "category": "external",
          "summary": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-rc95-pcm8-65v9",
          "url": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-rc95-pcm8-65v9"
        }
      ],
      "release_date": "2026-05-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-05T07:56:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:13631"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, configure a reverse proxy or load balancer in front of the Quarkus application to normalize incoming URL paths by stripping matrix parameters (semicolons) before requests reach the Quarkus security layer. This ensures that authorization checks are performed on the intended path. Ensure that any changes to proxy configurations are thoroughly tested and services are reloaded or restarted as necessary to apply the new settings.",
          "product_ids": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Build of Apache Camel 4.14 for Quarkus 3.27"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.quarkus:quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "New Red Hat build of Cryostat 4.2.0 on RHEL 9 container images are now available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Cryostat 4 on RHEL 9 container images have been updated to fix several bugs.\n\nUsers of Cryostat 4 on RHEL 9 container images are advised to upgrade to these updated images, which contain backported patches to fix these bugs and add these enhancements. Users of these images are also encouraged to rebuild all container images that depend on these images.\n\nSecurity Fix(es):\n\n* golang.org/x/image: Denial of Service via malformed WEBP image parsing (CVE-2026-33813)\n* follow-redirects: Information disclosure via cross-domain redirects (CVE-2026-40895)\n* io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests (CVE-2026-39852)\n* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815, CVE-2026-33816)\n* github.com/go-jose/go-jose: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)\n* lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800)\n* netty: Denial of Service via HTTP/2 CONTINUATION frame flood (CVE-2026-33871)\n* io.netty/netty-codec-http: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values (CVE-2026-33870)\n* path-to-regexp: Denial of Service via crafted regular expressions (CVE-2026-4926)\n* undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers (CVE-2026-1525)\n* google.golang.org/grpc: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n* undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression (CVE-2026-1526)\n* undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter (CVE-2026-2229)\n* undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528)\n* io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files (CVE-2026-1002)\n\nYou can find images updated by this advisory in the Red Hat Container Catalog (see the References section).",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:17789",
        "url": "https://access.redhat.com/errata/RHSA-2026:17789"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2430180",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430180"
      },
      {
        "category": "external",
        "summary": "2447142",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447142"
      },
      {
        "category": "external",
        "summary": "2447143",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447143"
      },
      {
        "category": "external",
        "summary": "2447144",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447144"
      },
      {
        "category": "external",
        "summary": "2447145",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447145"
      },
      {
        "category": "external",
        "summary": "2449833",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
      },
      {
        "category": "external",
        "summary": "2451867",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
      },
      {
        "category": "external",
        "summary": "2452453",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452453"
      },
      {
        "category": "external",
        "summary": "2452456",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452456"
      },
      {
        "category": "external",
        "summary": "2453496",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
      },
      {
        "category": "external",
        "summary": "2455470",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
      },
      {
        "category": "external",
        "summary": "2455972",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
      },
      {
        "category": "external",
        "summary": "2455975",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
      },
      {
        "category": "external",
        "summary": "2457819",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457819"
      },
      {
        "category": "external",
        "summary": "2460221",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460221"
      },
      {
        "category": "external",
        "summary": "2460297",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17789.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat build of Cryostat 4.2.0: new RHEL 9 container image security update",
    "tracking": {
      "current_release_date": "2026-08-20T17:19:30+00:00",
      "generator": {
        "date": "2026-08-20T17:19:30+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:17789",
      "initial_release_date": "2026-05-26T03:53:34+00:00",
      "revision_history": [
        {
          "date": "2026-05-26T03:53:34+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-05-26T03:53:34+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-20T17:19:30+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Cryostat 4 on RHEL 9",
                "product": {
                  "name": "Cryostat 4 on RHEL 9",
                  "product_id": "9Base-Cryostat-4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:cryostat:4::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Cryostat"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
                "product": {
                  "name": "cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
                  "product_id": "cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9\u0026tag=0.7.0-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
                "product": {
                  "name": "cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
                  "product_id": "cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9\u0026tag=4.2.0-13"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
                "product": {
                  "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
                  "product_id": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9\u0026tag=4.2.0-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
                "product": {
                  "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
                  "product_id": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9\u0026tag=4.2.0-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
                "product": {
                  "name": "cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
                  "product_id": "cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9\u0026tag=4.2.0-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
                "product": {
                  "name": "cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
                  "product_id": "cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9\u0026tag=4.2.0-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
                "product": {
                  "name": "cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
                  "product_id": "cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle\u0026tag=4.2.0-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
                "product": {
                  "name": "cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
                  "product_id": "cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator\u0026tag=4.2.0-13"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
                "product": {
                  "name": "cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
                  "product_id": "cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9\u0026tag=4.2.0-13"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
                "product": {
                  "name": "cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
                  "product_id": "cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9\u0026tag=4.2.0-9"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
                "product": {
                  "name": "cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
                  "product_id": "cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9\u0026tag=0.7.0-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
                "product": {
                  "name": "cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
                  "product_id": "cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9\u0026tag=4.2.0-13"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
                "product": {
                  "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
                  "product_id": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9\u0026tag=4.2.0-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
                "product": {
                  "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
                  "product_id": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9\u0026tag=4.2.0-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
                "product": {
                  "name": "cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
                  "product_id": "cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9\u0026tag=4.2.0-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
                "product": {
                  "name": "cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
                  "product_id": "cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9\u0026tag=4.2.0-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
                "product": {
                  "name": "cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
                  "product_id": "cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle\u0026tag=4.2.0-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
                "product": {
                  "name": "cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
                  "product_id": "cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator\u0026tag=4.2.0-13"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
                "product": {
                  "name": "cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
                  "product_id": "cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9\u0026tag=4.2.0-13"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64",
                "product": {
                  "name": "cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64",
                  "product_id": "cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9\u0026tag=4.2.0-9"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64"
        },
        "product_reference": "cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64"
        },
        "product_reference": "cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64"
        },
        "product_reference": "cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64"
        },
        "product_reference": "cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64"
        },
        "product_reference": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64"
        },
        "product_reference": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64"
        },
        "product_reference": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64"
        },
        "product_reference": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64"
        },
        "product_reference": "cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64"
        },
        "product_reference": "cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64"
        },
        "product_reference": "cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64"
        },
        "product_reference": "cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64"
        },
        "product_reference": "cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64"
        },
        "product_reference": "cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64"
        },
        "product_reference": "cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64"
        },
        "product_reference": "cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64"
        },
        "product_reference": "cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
        },
        "product_reference": "cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64"
        },
        "product_reference": "cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        },
        "product_reference": "cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-1002",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2026-01-15T21:03:20.088599+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2430180"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vert.x. The Web static handler component cache can be manipulated to deny the access to static files served by the handler using specifically crafted request URIs, preventing legitimate users from accessing static files with an HTTP 404 response.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability allows a remote attacker to block access to specific static files, such as images, CSS or HTML files. However, the underlying Vert.x server, the API endpoints and other non-cached resources are not affected. Due to this reason, this issue has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-1002"
        },
        {
          "category": "external",
          "summary": "RHBZ#2430180",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430180"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-1002",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-1002"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1002",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1002"
        },
        {
          "category": "external",
          "summary": "https://github.com/eclipse-vertx/vert.x/pull/5895",
          "url": "https://github.com/eclipse-vertx/vert.x/pull/5895"
        }
      ],
      "release_date": "2026-01-15T20:50:25.642000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, consider disabling the static handler cache by configuring the StaticHandler instance with setCachingEnabled(false), for example:\n\n~~~\nStaticHandler staticHandler = StaticHandler.create().setCachingEnabled(false);\n~~~",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files"
    },
    {
      "cve": "CVE-2026-1525",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2026-03-12T21:01:33.639277+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2447144"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in undici, a Node.js HTTP/1.1 client. A remote attacker could exploit this vulnerability by sending HTTP/1.1 requests that include duplicate Content-Length headers with different casing (e.g., \"Content-Length\" and \"content-length\"). This can lead to HTTP Request Smuggling, a technique where an attacker sends an ambiguous request that is interpreted differently by a proxy and a backend server. Successful exploitation could result in unauthorized access, cache poisoning, or credential hijacking. It may also cause a Denial of Service (DoS) if strict HTTP parsers reject the malformed requests.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Moderate impact. A flaw in the undici Node.js HTTP/1.1 client allows for HTTP Request Smuggling or Denial of Service. This can occur in Red Hat products that use undici and process HTTP requests where user-controlled header names are not case-normalized, or headers are passed as flat arrays.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-1525"
        },
        {
          "category": "external",
          "summary": "RHBZ#2447144",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447144"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-1525",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-1525"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1525",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1525"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://cwe.mitre.org/data/definitions/444.html",
          "url": "https://cwe.mitre.org/data/definitions/444.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodejs/undici/security/advisories/GHSA-2mjp-6q6p-2qxm",
          "url": "https://github.com/nodejs/undici/security/advisories/GHSA-2mjp-6q6p-2qxm"
        },
        {
          "category": "external",
          "summary": "https://hackerone.com/reports/3556037",
          "url": "https://hackerone.com/reports/3556037"
        },
        {
          "category": "external",
          "summary": "https://www.rfc-editor.org/rfc/rfc9110.html#section-8.6",
          "url": "https://www.rfc-editor.org/rfc/rfc9110.html#section-8.6"
        }
      ],
      "release_date": "2026-03-12T19:56:55.092000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers"
    },
    {
      "cve": "CVE-2026-1526",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-03-12T21:01:25.538271+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2447142"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in undici. A remote attacker can exploit this vulnerability by sending a specially crafted compressed frame, known as a \"decompression bomb,\" during permessage-deflate decompression. The undici WebSocket client does not properly limit the size of decompressed data, leading to unbounded memory consumption. This can cause the Node.js process to exhaust available memory, resulting in a denial of service (DoS) where the process crashes or becomes unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-1526"
        },
        {
          "category": "external",
          "summary": "RHBZ#2447142",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447142"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-1526",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-1526"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1526",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1526"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://datatracker.ietf.org/doc/html/rfc7692",
          "url": "https://datatracker.ietf.org/doc/html/rfc7692"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q",
          "url": "https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q"
        },
        {
          "category": "external",
          "summary": "https://hackerone.com/reports/3481206",
          "url": "https://hackerone.com/reports/3481206"
        }
      ],
      "release_date": "2026-03-12T20:08:05.950000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression"
    },
    {
      "cve": "CVE-2026-1528",
      "cwe": {
        "id": "CWE-248",
        "name": "Uncaught Exception"
      },
      "discovery_date": "2026-03-12T21:01:36.954017+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2447145"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in undici. A remote attacker could exploit this vulnerability by sending a specially crafted WebSocket frame with an extremely large 64-bit length. This causes undici\u0027s ByteParser to overflow its internal calculations, leading to an invalid state and a fatal TypeError. The primary consequence is a Denial of Service (DoS), which terminates the process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undici: undici: Denial of Service via crafted WebSocket frame with large length",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-1528"
        },
        {
          "category": "external",
          "summary": "RHBZ#2447145",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447145"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-1528",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-1528"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1528",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1528"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodejs/undici/security/advisories/GHSA-f269-vfmq-vjvj",
          "url": "https://github.com/nodejs/undici/security/advisories/GHSA-f269-vfmq-vjvj"
        },
        {
          "category": "external",
          "summary": "https://hackerone.com/reports/3537648",
          "url": "https://hackerone.com/reports/3537648"
        }
      ],
      "release_date": "2026-03-12T20:21:57.775000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "undici: undici: Denial of Service via crafted WebSocket frame with large length"
    },
    {
      "cve": "CVE-2026-2229",
      "cwe": {
        "id": "CWE-248",
        "name": "Uncaught Exception"
      },
      "discovery_date": "2026-03-12T21:01:29.187989+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2447143"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the undici WebSocket client. A remote malicious server can exploit this vulnerability by sending a WebSocket frame with an invalid `server_max_window_bits` parameter within the permessage-deflate extension. This improper validation causes the client\u0027s Node.js process to terminate, leading to a denial-of-service (DoS) condition for the client.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-2229"
        },
        {
          "category": "external",
          "summary": "RHBZ#2447143",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447143"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-2229",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-2229"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-2229",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2229"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://datatracker.ietf.org/doc/html/rfc7692",
          "url": "https://datatracker.ietf.org/doc/html/rfc7692"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodejs/undici/security/advisories/GHSA-v9p9-hfj2-hcw8",
          "url": "https://github.com/nodejs/undici/security/advisories/GHSA-v9p9-hfj2-hcw8"
        },
        {
          "category": "external",
          "summary": "https://hackerone.com/reports/3487486",
          "url": "https://hackerone.com/reports/3487486"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/api/zlib.html#class-zlibinflateraw",
          "url": "https://nodejs.org/api/zlib.html#class-zlibinflateraw"
        }
      ],
      "release_date": "2026-03-12T20:27:05.600000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter"
    },
    {
      "cve": "CVE-2026-4800",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2026-03-31T20:01:21.918257+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2453496"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4800"
        },
        {
          "category": "external",
          "summary": "RHBZ#2453496",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
          "url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
        },
        {
          "category": "external",
          "summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
          "url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
        }
      ],
      "release_date": "2026-03-31T19:25:55.987000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
    },
    {
      "cve": "CVE-2026-4926",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-03-26T20:03:28.427630+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451867"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in `path-to-regexp` that can lead to a Denial of Service. The vulnerability occurs when specially crafted input containing multiple sequential optional groups is used to generate regular expressions, causing exponential resource consumption.\n\nThe Red Hat Advanced Cluster Security is not affected by this issue since it\u0027s shipping a `path-to-regexp` version which doesn\u0027t contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4926"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451867",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4926",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "release_date": "2026-03-26T18:59:38+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
    },
    {
      "cve": "CVE-2026-33186",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-03-20T23:02:27.802640+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2449833"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "RHBZ#2449833",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
        }
      ],
      "release_date": "2026-03-20T22:23:32.147000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
    },
    {
      "cve": "CVE-2026-33813",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-21T20:01:02.224363+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460221"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/image. A remote attacker could exploit this vulnerability by providing a specially crafted WEBP image with an invalid, large size. This could cause the application to panic and crash on 32-bit platforms, leading to a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/image: golang: golang.org/x/image: Denial of Service via malformed WEBP image parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33813"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460221",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460221"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33813",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33813"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33813",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33813"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/759860",
          "url": "https://go.dev/cl/759860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78407",
          "url": "https://go.dev/issue/78407"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4961",
          "url": "https://pkg.go.dev/vuln/GO-2026-4961"
        }
      ],
      "release_date": "2026-04-21T19:21:27.644000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/image: golang: golang.org/x/image: Denial of Service via malformed WEBP image parsing"
    },
    {
      "cve": "CVE-2026-33815",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-04-07T16:01:25.130006+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455975"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33815"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455975",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33815",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33815"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4771",
          "url": "https://pkg.go.dev/vuln/GO-2026-4771"
        }
      ],
      "release_date": "2026-04-07T15:19:24.344000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
    },
    {
      "cve": "CVE-2026-33816",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-04-07T16:01:14.142946+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455972"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33816"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455972",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4772",
          "url": "https://pkg.go.dev/vuln/GO-2026-4772"
        }
      ],
      "release_date": "2026-04-07T15:19:24.529000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
    },
    {
      "cve": "CVE-2026-33870",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2026-03-27T21:01:59.865839+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2452453"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/1.1 chunked transfer encoding extension values. Due to incorrect parsing of quoted strings, this flaw enables request smuggling attacks, potentially allowing an attacker to bypass security controls or access unauthorized information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33870"
        },
        {
          "category": "external",
          "summary": "RHBZ#2452453",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452453"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33870",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33870"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33870",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33870"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8"
        },
        {
          "category": "external",
          "summary": "https://w4ke.info/2025/06/18/funky-chunks.html",
          "url": "https://w4ke.info/2025/06/18/funky-chunks.html"
        },
        {
          "category": "external",
          "summary": "https://w4ke.info/2025/10/29/funky-chunks-2.html",
          "url": "https://w4ke.info/2025/10/29/funky-chunks-2.html"
        },
        {
          "category": "external",
          "summary": "https://www.rfc-editor.org/rfc/rfc9110",
          "url": "https://www.rfc-editor.org/rfc/rfc9110"
        }
      ],
      "release_date": "2026-03-27T19:54:15.586000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values"
    },
    {
      "cve": "CVE-2026-33871",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-03-27T21:02:13.396015+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2452456"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty. A remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of CONTINUATION frames. The server\u0027s lack of a limit on these frames, coupled with a bypass of size-based mitigations using zero-byte frames, allows an attacker to consume excessive CPU resources. This can render the server unresponsive with minimal bandwidth usage.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This important vulnerability in Netty HTTP/2 servers allows a remote attacker to cause a Denial of Service by sending a flood of CONTINUATION frames. This can lead to excessive CPU consumption and render the server unresponsive. Red Hat products utilizing affected Netty versions, such as Red Hat AMQ, Enterprise Application Platform, and OpenShift Container Platform components, are impacted if configured to use HTTP/2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33871"
        },
        {
          "category": "external",
          "summary": "RHBZ#2452456",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452456"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33871",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33871"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33871",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33871"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv"
        }
      ],
      "release_date": "2026-03-27T19:55:23.135000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood"
    },
    {
      "cve": "CVE-2026-34986",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-04-06T17:01:34.639203+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455470"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455470",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
          "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
          "url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
        }
      ],
      "release_date": "2026-04-06T16:22:45.353000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
    },
    {
      "cve": "CVE-2026-39852",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-04-13T13:26:46.572000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2457819"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in io.quarkus:quarkus-vertx-http. A remote attacker can exploit an authorization bypass vulnerability by including semicolons, also known as matrix parameters, in HTTP requests. This allows bypassing path-based HTTP security policies, enabling unauthorized access to protected endpoints. The vulnerability arises because Quarkus\u0027s security layer performs authorization checks on the raw URL path, which preserves these matrix parameters.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.quarkus:quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2457819",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457819"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39852"
        },
        {
          "category": "external",
          "summary": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-rc95-pcm8-65v9",
          "url": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-rc95-pcm8-65v9"
        }
      ],
      "release_date": "2026-05-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, configure a reverse proxy or load balancer in front of the Quarkus application to normalize incoming URL paths by stripping matrix parameters (semicolons) before requests reach the Quarkus security layer. This ensures that authorization checks are performed on the intended path. Ensure that any changes to proxy configurations are thoroughly tested and services are reloaded or restarted as necessary to apply the new settings.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.quarkus:quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests"
    },
    {
      "cve": "CVE-2026-40895",
      "cwe": {
        "id": "CWE-212",
        "name": "Improper Removal of Sensitive Information Before Storage or Transfer"
      },
      "discovery_date": "2026-04-21T21:02:33.280553+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460297"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40895"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460297",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40895",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895"
        },
        {
          "category": "external",
          "summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
          "url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
        }
      ],
      "release_date": "2026-04-21T19:59:59.759000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-26T03:53:34+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:17789"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:05904c67af6e6d63949ea48f330cc3f9c4ce567dcf83b021dfb5360c48f9ae97_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:5e162295c4cce6d9def315835bfe671bf88f429a9dfbf1ee26bf1858c4702e5b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:9da420fb6051f62e735fc3b4507cfa4faba5cf983a7d3dceb5fd821c52595f8c_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:e6a27d9520ca69341235411b7dfab6366f73311fa0147f345c29a90dcb823d81_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ebed34803b5872d40fba925204af828932baba2501dd3cc751802fd2c3c5ef18_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a8e549b2557877c4e4ce8c13073f912b4fef397aa820bce20902b405778cd588_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:d1b918ec986072f9b35182414d9d785bdcf511044e33070d9e665b832e9bdc97_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:02939e59fc5fb80eafdb3ccbe30840f5a16c174fc78856dc3ad993e3cbec5ff0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:6c02eb8e3d175bbc9295934f3560652ab0d53d34ad8ebdc6cd573f00ca8fac87_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2d29b9fc42e33af7ec5871fc6753a9922542ab644de5fc661cdd811ce41fc203_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:143275d78803237bd4e9c339beda5a861b6e8de6fae0e55a329f983437595610_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b93e4a60ac90f538549f6694d7d016522a325b64731b9c99a2b55a7afac9c1a9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:0cd0765ead8288d987e54791a82bc9d410370daf45649d704f5f4b1b25827e7f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:fdd88ec5966a2deea291c4daaa28552056bf3fb88fa027fec0686b36c114f9c9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:6efb1b537d52c12b59a02929c57b31ae3ee04cfb1f6c091d0e6967212c71f1fb_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:8c76f05ffe0a2f3dd6b050cd455b48611e4edb16077f0e19dae4be2a52b654c3_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:5f6e2740e4ae7211c2a94e89db535d7be39761da38373763f1ea694211cc2c4f_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:f6a39d2a84f70d7e817be34f17846a76699aa2d554a7a8f1e2f93079eeba6333_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects"
    }
  ]
}